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Method for transferring data from a head-end to a number of 
receivers ~" ' " " ~ ^ 



The present invention relates to a method for trans- 
ferring data from a head-end to a number of receivers by 
means of a digital broadcast signal, each of said receivers 
including a descrambler for descrambling a received digital 
transport stream. 

The use of a digital broadcast signal, such as a DVB 
signal, for transferring data to one or more receivers shows 
the advantage that available receivers with descramblers can 
be used to transfer the data from a head-end to the receiver. 
However, such a method would normally not allow for a data 
transfer in a secure and private manner as the data is 
accessible to all receivers listening to the digital 
transport stream. 

The present invention aims to provide a method of 
the above-mentioned type wherein privacy and security of the 
data transfer can be provided to each receiver. 

According to the invention a method of the above- 
mentioned type is provided, including sending a message from 
the head-end to each receiver to which data needs to be 
transferred, said message including a key unique to the 
respective receiver, loading the unique key in the 
descrambler of the respective receiver, providing a table of 
unique keys with corresponding addresses of the respective 
receivers at the head-end, providing data packets with an 
individual address of at least one of said receivers, 
inserting said data packets into transport packets of a 
digital transport stream, selecting a key from said table in 
accordance with the address of the data packets, scrambling 
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said transport packets using the selected key, broadcasting 
the digital transport stream, receiving the digital transport 
stream at one or more receivers and descrambling the 
scrambled transport packets of the digital transport stream 
only at the receiver having the unique key used to scramble 
the scrambled transport packets. 

In this manner a method is obtained wherein each 
receiver attempting to descramble the broadcast signal will 
fail to descramble the signal accept for the receiver (s) 
having the unique key{s) used to scramble the transport 
packets in which the data packets are inserted which are 
intended to be received by this receiver. This results in the 
desired privacy and security for the data transfer between 
the head-end and the receiver. 

In a preferred embodiment for transferring data 
packets to two or more receivers, the data packets for 
different receivers are inserted into different transport 
packets, each of said transport packets being scrambled with 
a unique key corresponding with the individual address of the 
corresponding data packets. 

In this manner data transfer with privacy and 
security is provided for a number of receivers requesting the 
transfer of data. 

The invention will be further explained by reference 
to the drawings in which an embodiment of the invention is 
schematically shown . 

In this preferred embodiment the method is used to 
transfer data requested by a receiver from the Internet to 
the receiver on a digital broadcast signal or digital 
transport stream, so that an Internet connection is obtained 
with a high speed transfer of data to the receiver according 
to the Internet Protocol. However the method described can 
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also be used to transfer data to receivers at their request 
or initiated by the head-end in another manner. 

In the drawing a DVB system is very schematically 
shown by way of example, the system comprising head-end 
equipment 1 which will be indicated hereinafter by head-end, 
and a large number of subscribers having a receiver 2, only 
one of which is shown in the drawing. The receiver 2 includes 
a descrambler 3 co-operating with a smart card 4 in a usual 
manner. The descrambler 3 is used to descramble DVB services 
requiring a subscription. The receiver 2 is connected to the 
Internet 5 in a manner not further shown, for example by a 
well-known modem. If the receiver 2 requests the download of 
data, the data will be transferred to the receiver 2 via the 
head-end 1 by means of a broadcast signal in the following 
manner. 

According to the internet protocol the data includes 
an IP or MAC address of the receiver 2 requesting the data to 
be transferred to this receiver. Each receiver 2 for which 
the head-end 1 receives data packets with an individual 
address, i.e. the IP or MAC address, is sent a so-called 
Entitlement Control Message or ECM with a control word or key 
which is unique to the receiver 2. This message is encrypted 
using an individual key which is stored in the smart card 4 . 
At the head-end 1 the unique keys with the corresponding 
individual addresses are stored in a table 6. At the 
receiver (s) 2 to which an ECM is sent, the smart card 4 
decrypts the received message using its individual key to 
obtain the unique key. The decrypted key is loaded into the 
descrambler 3 for future use. 

At the head-end 1, the data packets for a specific 
receiver 2 requesting the transfer of data, are inserted into 
transport packets of the digital transport stream. Generally, 
the data packets are larger than the transport stream 
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packets, so that the data packets are split and thereafter 
inserted into a number of transport stream packets. Before 
scrambling the transport stream packets containing the data 
packets, the head-end checks the IP or MAC address and 
5 selects the corresponding unique key from the table 6, which 
key is used to scramble the transport stream packets. 

Each receiver 2 listening to the digital broadcast 
signal attempts to descramble the transport stream packets of 
the digital transport stream, wherein however only at the 

10 receiver 2 having the unique key used for scrambling the 

transport stream packets, the descrambling process will be 
successful. In this manner only one receiver 2 will 
descramble the scrambled transport stream packets to thereby 
obtain the IP data packets. 

15 From the above it will be clear that the described 

method results in a transfer of data with privacy and 
security for each receiver 2 requesting a data transfer. 
Moreover, this transfer with privacy and security is achieved 
while using existing DVB or MPEG scrambling and descrambling 

20 equipment. 

Generally, a number of receivers 2 will request the 
transfer of data. This is no problem as the head-end 1 will 
provide a table 6 including key/address combinations for each 
receiver 2 requesting a data transfer. The capacity of a 

25 digital broadcast signal is sufficient to transfer IP data 
packets to a large number of receivers 2. As the IP data 
packets for each particular receiver will be inserted into a 
number of transport packets wherein only these transport 
packets are scrambled using the unique key for this particu- 

30 lar receiver, data transfer will still take place in a 
private and secure manner. 

The data packets can be inserted into transport 
stream packets of a digital transport stream which is used 
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for the transfer of data only. As an alternative the data 
packets can be inserted into transport stream packets of a 
DVB transport stream as the capacity of such a transport 
stream is far more than necessary for transferring the video 
5 information. 

Although in the preferred embodiment the method is 
used to transfer IP data packets, the described method can 5 
also be used to transfer data from other sources than the. 
Internet. Further, it is noted that instead of an ECM another 
10 type of message may be used to transfer a unique key to a 
receiver , 



